Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b76a0f24-7811-3265-a5c2-2ba6119d566a.roa
File:                     b76a0f24-7811-3265-a5c2-2ba6119d566a.roa (raw, json)
Hash identifier:          I4DmwSIVvUem0n8+47zuiWZKM84oxlyu16n+AOoUoiI=
Subject key identifier:   2F:5B:C4:E0:4F:BA:1C:E9:66:27:B0:90:2C:01:9C:28:05:CC:C3:66
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584264E2F4A3A4989CD75C828A40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b76a0f24-7811-3265-a5c2-2ba6119d566a.roa
Signing time:             Fri 30 Jun 2023 18:43:23 +0000
ROA not before:           Fri 30 Jun 2023 18:43:23 +0000
ROA not after:            Thu 28 Sep 2023 18:43:23 +0000
asID:                     834
IP address blocks:        108.165.132.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:64:e2:f4:a3:a4:98:9c:d7:5c:82:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 30 18:43:23 2023 GMT
            Not After : Sep 28 18:43:23 2023 GMT
        Subject: CN=216ac52a-416e-4b07-b062-8e26278512b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:73:97:90:1e:1e:b6:e6:c2:f7:47:c5:e9:80:
                    e5:e0:bb:7d:2b:54:04:04:97:3f:63:fc:c0:3b:e0:
                    9e:41:a4:ac:52:ee:93:67:20:9a:9c:f0:c5:82:fe:
                    48:76:fe:24:af:63:a7:18:a8:49:16:ed:bf:0c:03:
                    b4:f8:bc:19:9b:b2:65:82:db:fc:4c:b5:a7:97:02:
                    13:3a:ca:70:e0:b7:4e:7b:0f:8f:a8:26:de:9a:c8:
                    9f:17:10:0c:8a:b0:fe:30:c9:26:1d:ca:14:af:46:
                    6b:30:a2:28:d6:99:87:df:c6:51:e6:c9:5c:7f:3e:
                    3a:ec:4b:ee:7a:c5:77:66:2b:60:58:6c:17:66:97:
                    47:04:a7:75:69:b7:de:89:82:4d:8b:44:5b:9b:cb:
                    fe:ef:e3:a6:e9:5c:9f:fb:03:8e:aa:5b:c8:16:a4:
                    d5:27:78:0c:b2:88:c3:57:fc:1c:c0:55:60:81:98:
                    b1:3c:d0:f0:ee:97:b6:f3:db:b7:bb:06:d1:16:ce:
                    bc:68:1d:03:a4:dd:98:07:f5:3a:68:b4:fd:ad:40:
                    65:ba:90:68:7c:d6:6e:2f:b2:8c:8e:b0:29:7d:d1:
                    75:6e:81:4b:f5:e8:76:ec:2a:7b:1f:6c:f3:3a:18:
                    8e:2c:11:14:d4:ad:9a:69:89:76:ba:ef:34:fc:4d:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5B:C4:E0:4F:BA:1C:E9:66:27:B0:90:2C:01:9C:28:05:CC:C3:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b76a0f24-7811-3265-a5c2-2ba6119d566a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:7b:59:29:51:d8:14:41:f4:44:22:17:99:e3:16:36:de:31:
         4b:cb:8b:f8:d7:e4:cd:e0:09:11:8e:16:9d:7e:f2:79:30:67:
         54:3e:d6:c0:a0:05:2f:0d:7e:d4:6f:fa:5d:5e:43:7a:3f:47:
         a4:58:46:6b:bb:87:50:62:15:59:8b:6f:44:63:08:f7:a3:5b:
         75:eb:5a:cf:9a:2f:8d:f8:2e:1d:8d:b0:ad:7d:7e:ee:f7:03:
         17:e1:20:c1:5b:f0:3f:20:af:3e:0d:4f:8f:ab:10:b3:bd:db:
         5d:ce:b2:d2:8b:13:c6:04:6b:6a:d6:1d:c4:e0:3a:82:5c:1c:
         e1:3b:f9:ae:b0:48:5e:43:40:29:dd:e8:5d:d4:5d:00:5a:f4:
         54:94:10:60:52:c3:46:34:a6:49:d7:90:e8:5d:7c:bc:17:8c:
         07:3b:ad:c3:47:6f:fa:7e:5d:9b:a2:c6:b5:83:a5:54:17:cc:
         ce:8e:f8:fb:7f:44:84:b3:89:60:50:4d:fc:55:14:19:35:8c:
         ea:53:06:da:c2:a9:b5:ff:81:87:12:b5:c0:d6:bb:ce:3d:27:
         f8:22:5b:32:f9:ae:2b:da:69:65:a5:36:8a:ff:17:b1:dd:1d:
         d4:4e:38:0d:cb:47:2a:b7:68:f8:7f:21:5e:1d:cc:67:f5:a1:
         c5:12:9f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----